Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/qYQ9-ZLp3ICDpTRvA0OxOzMuxA8.roa
File: qYQ9-ZLp3ICDpTRvA0OxOzMuxA8.roa (raw, json)
Hash identifier: CfgPPUk5u/3J7LEMjkxqwA2xinJSYrpGEdEDcN3eE5M=
Subject key identifier: A9:84:3D:F9:92:E9:DC:80:83:A5:34:6F:03:43:B1:3B:33:2E:C4:0F
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 03F8BF7B
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/qYQ9-ZLp3ICDpTRvA0OxOzMuxA8.roa
Signing time: Sat 01 Jan 2022 11:53:55 +0000
ROA not before: Sat 01 Jan 2022 11:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21140
IP address blocks: 185.212.90.0/24 maxlen: 24
185.212.88.0/23 maxlen: 23
185.212.91.0/24 maxlen: 24
2a0b:7540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66633595 (0x3f8bf7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 11:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9843df992e9dc8083a5346f0343b13b332ec40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:7a:4d:2b:2c:4e:df:8e:82:3d:18:30:c8:
b8:bf:43:29:f2:d7:a8:f3:71:fd:64:05:8a:5e:b3:
c4:fe:99:b8:5a:aa:71:25:bc:48:14:2e:41:57:94:
82:e0:ff:be:24:39:c5:5c:f8:97:fa:3b:53:96:66:
d2:f9:48:5c:67:f9:e9:15:d9:b4:ed:f4:04:1d:45:
e2:c9:e8:04:09:f6:5e:bf:77:6c:88:56:8a:65:7c:
e5:cf:76:70:d6:e5:9c:85:43:24:59:12:e3:7e:4f:
a8:bc:06:f9:85:be:65:22:9d:8e:6f:c3:9a:ec:d5:
a3:43:ca:4e:75:33:0b:54:58:40:96:8e:b9:fd:fc:
e8:f9:7d:9d:0f:05:1b:a0:f7:1f:92:b1:3d:15:e5:
c7:f6:0a:b3:e5:4c:69:03:27:a3:09:50:69:b2:c0:
09:c5:21:be:f0:59:71:86:b9:c4:88:8b:ad:40:50:
9f:0d:de:5e:d9:23:0e:5c:94:3c:21:3b:3b:a4:88:
0e:04:ec:f0:39:03:d1:78:7c:ab:8c:20:f7:1c:ef:
45:36:ef:e2:dc:19:83:11:f1:6a:3a:8d:90:de:79:
cf:34:9d:ed:56:d7:3e:3d:e9:d6:ec:04:14:52:85:
52:59:d1:16:f0:de:86:db:6d:6b:60:44:50:57:6f:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:3D:F9:92:E9:DC:80:83:A5:34:6F:03:43:B1:3B:33:2E:C4:0F
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/qYQ9-ZLp3ICDpTRvA0OxOzMuxA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0/22
IPv6:
2a0b:7540::/29
Signature Algorithm: sha256WithRSAEncryption
15:e7:67:c1:50:05:5b:01:4b:d7:6a:eb:20:c5:58:c2:c4:68:
c5:71:2d:9f:86:68:4e:c2:a2:37:5d:97:c3:19:10:de:d5:3e:
68:69:03:e0:77:74:8f:71:9a:45:64:92:3a:25:f6:f0:c9:56:
be:66:19:f2:3d:4d:e8:60:ce:8c:ec:98:6d:26:ec:4c:01:56:
11:1a:98:8f:a7:60:58:d8:80:93:21:cd:cf:93:cf:dd:21:26:
aa:94:e0:1a:e1:fc:1d:3b:33:44:10:77:34:b8:2d:fd:92:b0:
c4:57:d3:44:72:91:8a:c1:09:db:74:2e:24:57:61:0c:33:c9:
52:3d:13:3d:cb:e2:29:0c:fe:d8:01:ab:6a:a9:d4:0d:36:ed:
fe:7f:bd:f9:66:8c:8d:84:3f:61:ed:44:71:7b:0a:9c:99:53:
03:57:62:fc:bc:9d:e3:a9:d3:11:b7:db:be:bc:28:e0:a2:93:
3d:d7:ca:9a:5a:03:6d:6c:e6:e1:7d:a7:aa:1d:ba:1e:50:04:
20:81:45:b0:45:77:0b:20:7e:67:2d:c6:8a:ca:92:03:9f:a2:
98:74:60:cc:02:bb:3a:ef:9e:6c:4d:7c:9c:24:bf:5a:88:d8:
cc:ba:c5:ce:a3:54:32:ce:92:4c:cf:f0:12:bf:c1:25:5b:87:
56:e7:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net